feat: improve DMG handling and root-run robustness for v0.3.1

- Update signature logic to skip artifacts without .sig files (with a warning) instead of erroring, specifically addressing DMG files which Tauri doesn't sign for updates.
- Enhance version detection to support tauri.conf.json in both root and src-tauri directories.
- Add support for both Tauri 1.0 and 2.0 configuration structures (tauri.updater vs plugins.updater).
- Trim signatures in generated latest.json to prevent trailing newline issues.
- Revamp README.md with Quick Start, platform priority tables, and clearer requirements.
- Update Cargo.toml to exclude development scripts, Makefile, and test fixtures from the published crate.
- Update CHANGELOG.md for the 0.3.1 release.

Author: shayyz-code

.github/workflows/ci.yml

@@ -25,14 +25,8 @@ jobs:
       - name: Check formatting
         run: cargo fmt --all -- --check
 
-      - name: Run verification suite
-        run: bash scripts/test.sh
-
-      - name: Run CLI smoke checks
-        run: bash scripts/smoke-cli.sh
+      - name: Run clippy
+        run: cargo clippy --all-targets --all-features -- -D warnings
 
-      - name: Run generation smoke check
-        run: bash scripts/smoke-generate.sh
-
-      - name: Run generation smoke check with repo/fallback tauri.conf.json
-        run: bash scripts/smoke-generate-current-conf.sh
+      - name: Run verification suite
+        run: make verify

.github/workflows/publish.yml

@@ -24,8 +24,11 @@ jobs:
       - name: Check formatting
         run: cargo fmt --all -- --check
 
-      - name: Run tests
-        run: cargo test --all-features
+      - name: Run clippy
+        run: cargo clippy --all-targets --all-features -- -D warnings
+
+      - name: Run release verification suite
+        run: make verify
 
       - name: Publish to crates.io
         env:

.gitignore

@@ -5,3 +5,4 @@ tauri.conf.json
 
 .env*
 .DS_Store
+real-tauri-app/

CHANGELOG.md

@@ -6,12 +6,25 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+## [0.3.1] - 2026-04-27
+
 ### Changed
+
 - Documentation updates and release prep notes.
+- Improved macOS updater handling by preferring `.app.tar.gz` artifacts over `.dmg` and skipping platforms where signatures are missing (e.g. DMG files which Tauri doesn't sign).
+- Made CLI root-run friendly for `src-tauri` projects by reading version and public key from both root and `src-tauri` locations, supporting both Tauri 1.0 and 2.0 configurations.
+
+### Added
+
+- Added optional real-app smoke test script: `scripts/smoke-real-tauri-app.sh`.
+- Added `make smoke-real-app` target for validating against a local real Tauri app.
+- Added `real-tauri-app/` to `.gitignore` for local real app fixtures.
+- Added support in real-app smoke testing for `src-tauri/tauri.conf.json` and temporary installer/version bootstrapping.
 
 ## [0.3.0] - 2026-04-27
 
 ### Added
+
 - Added test scripts:
   - `scripts/test.sh` for full verification checks.
   - `scripts/smoke-cli.sh` for CLI command smoke tests.
@@ -21,6 +34,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - Added CI workflow to run format checks, tests, and smoke scripts on push/pull requests.
 
 ### Changed
+
 - Converted project to CLI-only usage (removed library usage path).
 - Added explicit `help`/`version` commands and short flags.
 - Updated docs and specifications for CLI-only behavior.
@@ -29,4 +43,5 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 ## [0.2.5] - 2026-04-27
 
 ### Changed
+
 - Baseline release prior to CLI-only and CI/test-script enhancements.

CONTRIBUTING.md

@@ -34,11 +34,14 @@ Please make sure to read and follow our [Code of Conduct](CODE_OF_CONDUCT.md).
 - Include reproduction steps if fixing a bug.
 - Ensure the full verification set passes:
   - `make verify`
+  - `make clippy`
+  - optional real app validation: `make smoke-real-app`
   - or run scripts manually:
   - `./scripts/test.sh`
   - `./scripts/smoke-cli.sh`
   - `./scripts/smoke-generate.sh`
   - `./scripts/smoke-generate-current-conf.sh`
+  - `REAL_APP_DIR=/path/to/your-app ./scripts/smoke-real-tauri-app.sh`
 
 ## Release Process
 

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "tauri-latest-json"
-version = "0.3.0"
+version = "0.3.1"
 authors = ["Aung Min Khant <aungminkhant.shay@gmail.com>"]
 edition = "2021"
 description = "Generate multi-platform Tauri updater latest.json from built installers"
@@ -9,14 +9,14 @@ repository = "https://github.com/shayyz-code/tauri-latest-json"
 readme = "README.md"
 keywords = ["tauri", "updater"]
 categories = ["command-line-utilities", "development-tools"]
-exclude = [".env", ".env.*"]
+exclude = [".env", ".env.*", "scripts/", "Makefile", "SPEC.md", "real-tauri-app/"]
 
 [dependencies]
 serde = { version = "1.0", features = ["derive"] }
 serde_json = "1.0"
 chrono = { version = "0.4", features = ["serde"] }
 walkdir = "2.5"
-toml = "0.8"
+toml = "1.1.2"
 
 [features]
 default = []

Cargo.toml

@@ -1,14 +1,16 @@
 SHELL := /bin/bash
 
-.PHONY: help fmt test smoke-cli smoke-generate smoke-generate-current-conf verify ci check dry-publish
+.PHONY: help fmt clippy test smoke-cli smoke-generate smoke-generate-current-conf smoke-real-app verify ci check dry-publish
 
 help:
 	@echo "Available targets:"
 	@echo "  make fmt             - Check formatting"
+	@echo "  make clippy          - Run clippy with warnings as errors"
 	@echo "  make test            - Run verification test suite"
 	@echo "  make smoke-cli       - Run CLI smoke checks"
 	@echo "  make smoke-generate  - Run end-to-end generation smoke check"
 	@echo "  make smoke-generate-current-conf - Run smoke check using repo tauri.conf.json (or fallback in CI)"
+	@echo "  make smoke-real-app  - Run smoke check against local real-tauri-app (ignored by git)"
 	@echo "  make verify          - Run full local verification (fmt + tests + all smokes)"
 	@echo "  make ci              - Alias of verify"
 	@echo "  make check           - Cargo check with verify-signature feature"
@@ -17,6 +19,9 @@ help:
 fmt:
 	cargo fmt --all -- --check
 
+clippy:
+	cargo clippy --all-targets --all-features -- -D warnings
+
 test:
 	bash scripts/test.sh
 
@@ -29,6 +34,9 @@ smoke-generate:
 smoke-generate-current-conf:
 	bash scripts/smoke-generate-current-conf.sh
 
+smoke-real-app:
+	bash scripts/smoke-real-tauri-app.sh
+
 verify: fmt test smoke-cli smoke-generate smoke-generate-current-conf
 
 ci: verify